A European tax filing service relied on a web application to guide its clients through the complex process of submitting tax information. The application captured essential details and facilitated filings across various European regions. However, the underlying technology had significant limitations. The existing codebase, inherited from a previous development team, was built on an outdated version of Node.js. This made it difficult to introduce new features and meant the system struggled to handle increased user loads, leading to slow performance and potential service interruptions during peak times.
What was going wrong
The core problem was a lack of stability and security. The backend data infrastructure was not secure, and critically, it failed to meet the stringent requirements of GDPR (General Data Protection Regulation). This meant client data was at risk, and the service faced potential legal penalties and a loss of trust from its users. Data sanitisation, retention policies, and overall data handling were not in order, posing a significant compliance risk.
The client approached us in September, seeking to address these problems and add new features. This timing presented a major constraint: the peak tax filing season typically runs from December to January. This meant a complete backend restructuring, security auditing, and deployment had to be completed within a tight window to ensure the application was ready for its busiest period. Furthermore, the client had expressed interest in integrating AI functionalities, but the existing system's issues with Personally Identifiable Information (PII) and data retention made this an immediate non-starter.
What we built
We advised the client that a complete overhaul of the backend was necessary. The existing Node.js backend was replaced with NestJS, a framework chosen for its ability to support a more scalable and secure system. This move allowed us to build a strong and secure foundation, addressing the previous vulnerabilities head-on. We carefully implemented all necessary features to ensure the system would pass rigorous security audits and fully comply with GDPR standards, including proper data sanitisation and clear data retention policies. This included establishing robust access controls and encryption protocols to protect sensitive client information.
The new system was designed to capture tax data with precision and clarity, reducing the likelihood of errors. We focused on creating a user experience that simplified the often-daunting task of tax filing. This involved guiding users through the data capture process with a clear, step-by-step experience, making it intuitive and less stressful. The aim was to make the process feel straightforward, even for those unfamiliar with tax regulations. Once the necessary tax data was accurately captured, the system was then able to provide clients with details of any refunds they were eligible for.
The unyielding deadline
The most significant constraint was the project timeline. Starting in September, with the peak tax season beginning in December and extending into January, meant that the entire backend code restructuring, auditing, and deployment had to be completed in just a few months. This was a challenging undertaking, given the scope of work required to transform an insecure, unscalable system into a fully compliant and efficient one. Delivering a stable and reliable application before the tax season was paramount to the client's business operations.
Where we drew the line
During the initial assessment, the client's interest in AI capabilities was noted. However, the existing system's fundamental problems with PII handling and data retention posed significant risks for any AI integration. Given the immediate need for a secure, compliant, and scalable system before the peak tax season, we made the deliberate decision to focus solely on the core backend revamp and GDPR compliance. Integrating AI features at that stage would have introduced too much complexity and risk, potentially jeopardising the primary goal of delivering a stable tax filing service on time. We prioritised establishing a solid, compliant foundation first, leaving future AI enhancements for a later, separate phase.
The outcome that mattered
The project was delivered on schedule, resulting in a fast, reliable, and easy-to-use product. The new system proved capable of handling the increased customer load during the peak tax season. The client reported that the tax season proceeded perfectly, without any disruptions or issues related to the application, which was a significant improvement from previous years. The system has continued to run without requiring any maintenance from our side since its deployment, demonstrating its stability and the quality of the underlying architecture. This outcome allowed the client to confidently manage their business and serve their customers throughout a critical period, securing their reputation and ensuring continued service.
Have a system that needs to do this?
500+ systems shipped since 2011, and we still maintain most of them. Tell us what you are trying to move.
